If everything else fails, try using a Local admin service account with some unique name to run the Attendant service and Domain admin account for the scanning job/computers alternative credentials.Verify GPO policies and resolve any restrictions with the help of your AD administrators. Or another policy may prevent all the domain servers to log in to other servers even with the domain admin credentials. For example, the policy may restrict the domain account from having local administrator access on the target machines - this third party link may be useful in such cases. There are various GPO policies introducing security restrictions in the domain.For a single domain, if the correct domain administrator credentials are used to run the Attendant service, there is no need to use alternative credentials. If you have a multi-domain environment, follow the Best practices for setting up account permissions with alternative credentials in LanGuard.If they fail, the alternative credentials will be used (if any are set up for the machine or job). The 'Access is denied' error when scanning using the domain admin account can be caused by environmental variables, such as multi-domain issues, or GPO policy restrictions.īy default, scans are performed by the account being used to run the GFI LanGuard Attendant service. The same credentials are used for running the services. You are having issues scanning devices with the domain admin account.

Lansweeper scanning access denied